Article here.
As a former hacker–grey-hat at worst–what are we supposed to do?
I feel like giving up. Like no matter what we do, some government or corporation will find a way to benefit from whatever anybody ever does.
Now, I don’t know.
The article you linked to talks about cyber criminals using formjacking to steal information from you. I’m not sure where you are getting the connection to governments or corporations from. It’s the cyber criminals, not governments or corporations that are benefiting from it. The only corporations benefiting from it are the anti-virus guys. Everyone else is losing money dealing with the problem.
In any event, this is generally a server-side hack, so it’s up to the guys running the server to prevent it from happening.
The article does mention cell phones, though. Be careful what apps you install. A lot of apps may look like something cute and harmless, but their real intent is to steal your personal info. One thing you can do to combat this is to go through all of your apps and look at what permissions you have given them. Make sure they can’t access anything that you don’t want them to access.
So unless I’m misunderstanding something, it still requires someone to hack into your domain and add scripts to your HTML that steal the data. If you can’t prevent that, then you are in a bad place security wise, this is just the most recent way of taking advantage of that kind of hack, that is clever about how it hides the malicious code.
Brian Krebs has a description here:
https://krebsonsecurity.com/tag/formjacking/
That’s probably the thing. I got old. Since the mid-00s, I haven’t given much of a damn about cell phone apps. I simply don’t download any. Not for use, not for disassembly.
So I guess that’s the answer. I got old. You young bucks, pay heed–beware motherfuckers who want to use you.
Sorry for the rambling posts. Had a blood sugar incident last night.